What's Changed
Highlights:
- Added SARIF and DefectDojo-compatible JSON output (#1085).
- Added custom wordlists and directory-enumeration base paths (#1026, #1019).
- Added port exclusions, HTTP scheme selection, custom request headers, and sensitive-header filtering (#1099, #1342, #1107).
- Exposed service-discovery, port-exclusion, and custom-header options in the Web UI (#1113).
- Added browser uploads for targets and wordlists (#1552).
- Added searchable profiles, scan methods, and results to the Web UI (#1675).
- Added crt.name support to subdomain discovery (#1661).
- Moved runtime data from .data to .nettacker/data, including automatic SQLite database migration (#1100).
- Added FreeBSD support and ARM container images (#1136, #1351).
- Removed the NumPy dependency (#947).
New scanning coverage
- Added CUPS, configuration-file, SMB brute-force, Jenkins, SmarterMail, CrushFTP patch-date, and Adobe AEM patch-date scanners.
- Expanded WordPress plugin coverage and refreshed bundled discovery wordlists.
- Added detection for:
- Palo Alto PAN-OS CVE-2025-0108 and GlobalProtect CVE-2025-0133
- SonicWall SSLVPN CVE-2024-53704
- WordPress CVE-2023-47668 and CVE-2026-63030
- Joomla CVE-2023-23752
- aiohttp CVE-2024-23334
- Vite CVE-2025-31125
- CrushFTP CVE-2025-31161
- Meteobridge CVE-2025-4008
- SmarterMail CVE-2026-24423
- React2Shell CVE-2025-55182
- Memos CVE-2025-22952
- GeoServer CVE-2024-36401
- Langflow CVE-2025-3248
- SiYuan CVE-2026-34605
- Sonatype Nexus Repository CVE-2024-4956
- Majordomo CVE-2026-27174
- Adobe ColdFusion CVE-2026-48282
- Nginx UI CVE-2026-33032
- Metabase CVE-2026-72898
New Contributors
- @tadash10 made their first contribution in #934
- @Phantomwise made their first contribution in #952
- @Manushya-a made their first contribution in #964
- @AntonLadaneu made their first contribution in #969
- @tanaydin made their first contribution in #976
- @bhagyashree980 made their first contribution in #983
- @winters0x64 made their first contribution in #985
- @nitinawari made their first contribution in #993
- @Soumyaditya25 made their first contribution in #996
- @osamaahmed17 made their first contribution in #994
- @pUrGe12 made their first contribution in #1008
- @dypar33 made their first contribution in #1048
- @NtAlexio2 made their first contribution in #1068
- @Synchx00 made their first contribution in #1101
- @Davda-James made their first contribution in #1117
- @einsibjarni made their first contribution in #1136
- @Aarush289 made their first contribution in #1162
- @S3DFX-CYBER made their first contribution in #1192
- @sankalp-b1401 made their first contribution in #1218
- @JanpreetWazir made their first contribution in #1223
- @luck9823 made their first contribution in #1278
- @Gauravsharma2040 made their first contribution in #1295
- @berardifra made their first contribution in #1267
- @Megabyte135 made their first contribution in #1336
- @jess-tech-lab made their first contribution in #1343
- @jksolbakken made their first contribution in #1351
- @PhucQuan made their first contribution in #1367
- @Raavi29 made their first contribution in #1487
- @juandiego-bmu made their first contribution in #1498
- @aenawi made their first contribution in #1520
- @NSK-394 made their first contribution in #1612
- @Prajwal5755 made their first contribution in #1625
- @Franc-Zar made their first contribution in #1632
- @srkyn made their first contribution in #1659
Full Changelog: 0.4.0...0.4.1